I work with a vendor who will not let me repeat a password within the last 9 passwords…9?? Really? Not customer centered I’ll tell you- and I have to add a ‘special character’- so now all my passwords are ‘Yelling!’

Therr is a point when password security becomes so rediculpus it becomes insecure because the more complex you force someone to make their password the more likely it is to be written on a Post-It note attached to the monitor.

I’ve seen studies which suggest that the ideal approach to password security is to require a long and complex password but not require it be changed more frequently than once a year. Unfortunately, I can’t seem to convince our director of IT security of this.

I can come up with some pretty good passwords; but when a site demands exceptions I’ll never remember, I have a strong tendency to never come back. When I am forced to do business with one of these cretins, I inevitably have to click “Forgot your Password?”